Privacy Policy
Last updated: October 25, 2026
This policy explains how Wynderwood (“we,” “us,” or “the game”) handles information when you visit wynderwood.com, create an account, or play. Wynderwood is operated as an independent online game.
Information we handle
- Account details: email address, adventurer name, password verifier, verification status, and account timestamps. Passwords are not stored in readable form.
- Game and community data: character choices, progress, inventory, prestige history, guild membership, duels, public town messages, moderation reports, and related game records.
- Session and security data: a random session token (stored in a browser cookie and represented by a hash on the server), session expiration, and last activity time. Last activity supports the live online roster.
- Technical data: the hosting provider may process connection and request information, such as IP address and browser details, in its server logs under its own retention and privacy practices.
How we use information
We use this information to create and secure accounts; save and synchronize game progress; deliver email verification and password-reset links; show shared-world features; enforce game rules; respond to reports; prevent abuse; and operate, maintain, and improve the game.
What other players can see
Adventurer names, character class and level, prestige history, guild details, public messages, public game activity, and duel outcomes may appear to other players or on public game pages. Your login email and password are not shown to other players.
Cookies, fonts, and analytics
Wynderwood uses an essential, HTTP-only session cookie to keep you signed in. It is marked SameSite=Strict and is sent over HTTPS on the hosted site. We do not currently configure advertising cookies or third-party analytics. The site loads its typefaces from Google Fonts; when a page loads those fonts, your browser connects to Google and Google may receive technical connection information under its own policies.
Service providers and sharing
We use HawkHost for web hosting and database storage. Account verification and password recovery messages are sent through the configured transactional email provider (currently Resend or SMTP, depending on deployment settings). These providers process information needed to provide their services. We do not sell account information or share it for targeted advertising. We may disclose information when required by law or when reasonably necessary to protect players, the service, or the public.
Retention and security
Account and game records are retained while needed to run the shared world. Public community records may remain visible while attached to the game. Session tokens expire and password-reset or verification tokens are time-limited. We use password hashing, hashed session tokens, access controls, and HTTPS on the hosted site; no online service can promise perfect security.
Your choices and requests
You can update your password using the account recovery flow. For questions or requests about your account or personal information, contact the site operator at support@wynderwood.com. Account deletion is handled by request; it is not currently available as a self-service control in the game. We may need to retain limited records for security, dispute resolution, or legal obligations.
Children
Wynderwood is intended for a general audience of players age 13 and older and is not directed to children under 13. Do not create an account if you are under 13. If we learn that we collected personal information from a child under 13, we will take steps to delete it.
Changes and contact
We may update this policy as the game changes. We will change the date above when we do. Questions can be sent to support@wynderwood.com.
This policy describes the current game and its configured services. For questions or account and privacy requests, contact support@wynderwood.com.